Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
File:                     6Ind1VQsbSydx0DhJGqedI51E1I.mft (raw, json)
Hash identifier:          /6Af3/x1mFY8YH5AY41Gy9lHAjO2auVBva3h3Z1sq5s=
Subject key identifier:   BA:F8:85:EF:46:C6:DA:E1:4E:3E:3B:FF:AC:F1:D4:D4:17:70:5C:65
Authority key identifier: E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
Certificate issuer:       /CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Certificate serial:       0740
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
Manifest number:          072F
Signing time:             Sat 14 Jun 2025 21:34:19 +0000
Manifest this update:     Sat 14 Jun 2025 21:34:18 +0000
Manifest next update:     Sat 21 Jun 2025 21:34:18 +0000
Files and hashes:         1: 6Ind1VQsbSydx0DhJGqedI51E1I.crl (hash: HTqvqsdlJcQ/b/se9ozjuh80zf0XQER046Xj1GYAY74=)
                          2: 243B94A23E7A11EBBFFAC96BC4F9AE02.roa (hash: Cr86pDAeYBNOH/f3Ffkig2n8Xta7VZxs/ZGTP0dC2Ds=)
                          3: BB684734816B11EFA4D23930C4F9AE02.roa (hash: yDEfQxbpM8/45yk57WWqW8Bt+VgNvfcfxMhi33lEx40=)
                          4: 9E82296E5FA611EF9A75477FC4F9AE02.roa (hash: lV6jMb5h9nbmgpZPjhxFVRMKMVNkKVjEOjsDZ14+HCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
                          rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 21:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1856 (0x740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A138, serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
        Validity
            Not Before: Jun 14 21:34:18 2025 GMT
            Not After : Jun 21 21:34:18 2025 GMT
        Subject: CN=684deada-0c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:53:df:8b:90:af:6b:b2:f9:6c:10:09:a6:
                    d1:59:7a:15:0a:28:95:4e:a5:52:49:05:cb:24:23:
                    bc:66:72:2d:77:76:c2:d3:30:3a:5d:69:dc:4c:7c:
                    61:5c:dd:c8:14:ef:b8:a8:64:c7:b7:46:ea:71:01:
                    ac:b4:a3:3e:73:af:74:4d:86:1a:22:5a:2c:e4:a9:
                    c9:48:cb:d3:56:2e:4f:bc:d4:a2:be:b6:88:59:b0:
                    07:c9:a3:2f:9f:cf:d2:19:27:e7:53:48:f6:d7:0c:
                    a7:b3:b0:85:79:7e:38:45:47:f2:96:ac:36:09:3a:
                    49:95:cd:f4:91:76:13:dd:41:df:cd:d0:2c:df:fe:
                    58:6e:e4:41:9f:a7:5a:bb:48:f3:6f:63:44:46:e4:
                    b5:a4:19:d2:85:9d:cc:2f:13:f0:fb:8d:e3:24:2f:
                    d7:38:4f:48:52:ae:bb:2f:82:1c:89:35:52:8b:53:
                    8a:3e:47:d5:f7:a8:8a:a7:88:56:5c:f6:50:a0:5c:
                    5f:21:cc:e4:52:da:9b:98:35:ce:64:de:dc:86:e5:
                    b9:5c:61:81:e0:0c:c3:24:27:e1:85:7d:7c:00:fc:
                    dd:92:e6:2f:f4:22:d6:be:2c:12:12:8d:0e:45:d0:
                    2d:13:3a:bb:14:da:cb:78:fb:ad:28:a1:8d:0c:d2:
                    88:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:85:EF:46:C6:DA:E1:4E:3E:3B:FF:AC:F1:D4:D4:17:70:5C:65
            X509v3 Authority Key Identifier:
                keyid:E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6f:8a:b3:01:3f:20:7c:a0:d0:93:88:67:88:d1:4a:71:d3:
         58:13:a5:f3:da:bc:53:d1:f7:d9:99:50:83:0e:37:0a:1b:09:
         bb:d0:8d:d0:62:89:30:eb:db:5f:ae:dd:ee:9b:cf:c3:7b:5c:
         0f:70:c5:49:70:e5:04:54:95:05:5f:d4:04:f2:80:50:72:42:
         b7:52:c0:75:f0:38:f7:6c:28:93:2f:94:32:4c:8e:7f:02:ec:
         46:21:8b:35:0c:b4:5a:4a:c1:bc:ca:b1:5d:85:64:03:78:1a:
         85:cf:bb:e1:fb:14:f3:d7:19:46:3c:a3:b9:e7:f5:af:a7:84:
         47:97:c9:cd:b5:91:45:6e:98:6e:8d:12:1d:df:28:ae:19:8f:
         41:f9:d5:6f:d8:e1:05:9d:26:c0:27:ee:4d:51:db:64:62:50:
         8c:67:42:46:53:d3:f2:e7:da:84:8e:c0:93:ff:d9:28:84:86:
         39:fd:25:31:b2:6a:94:71:5f:e1:1d:10:a7:11:92:84:d7:b9:
         6d:d1:c7:68:40:ec:46:8a:ac:c7:84:ba:b3:91:72:b5:35:fa:
         e4:a8:47:4c:4c:1b:5a:bc:af:6e:0f:3d:0e:4d:38:ae:f3:b8:
         fc:89:e2:66:33:75:f7:16:20:97:8a:bd:fd:f5:b7:6e:a3:76:
         2e:5e:40:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkExMzgxMTAvBgNVBAUTKEU4ODlEREQ1NTQyQzZEMkM5REM3NDBFMTI0NkE5RTc0
OEU3NTEzNTIwHhcNMjUwNjE0MjEzNDE4WhcNMjUwNjIxMjEzNDE4WjAYMRYwFAYD
VQQDEw02ODRkZWFkYS0wYzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYdT34uQr2uy+WwQCabRWXoVCiiVTqVSSQXLJCO8ZnItd3bC0zA6XWncTHxh
XN3IFO+4qGTHt0bqcQGstKM+c690TYYaIlos5KnJSMvTVi5PvNSivraIWbAHyaMv
n8/SGSfnU0j21wyns7CFeX44RUfylqw2CTpJlc30kXYT3UHfzdAs3/5YbuRBn6da
u0jzb2NERuS1pBnShZ3MLxPw+43jJC/XOE9IUq67L4IciTVSi1OKPkfV96iKp4hW
XPZQoFxfIczkUtqbmDXOZN7chuW5XGGB4AzDJCfhhX18APzdkuYv9CLWviwSEo0O
RdAtEzq7FNrLePutKKGNDNKIkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLr4he9G
xtrhTj47/6zx1NQXcFxlMB8GA1UdIwQYMBaAFOiJ3dVULG0sncdA4SRqnnSOdRNS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEzOC9CQjA2QjMzODM5
MjcxMUVCOUY5NTVFN0VDNEY5QUUwMi82SW5kMVZRc2JTeWR4MERoSkdxZWRJNTFF
MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZJbmQxVlFzYlN5ZHgwRGhKR3FlZEk1MUUxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTEzOC9CQjA2QjMzODM5MjcxMUVCOUY5NTVFN0VDNEY5QUUwMi82SW5kMVZRc2JT
eWR4MERoSkdxZWRJNTFFMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdb4qzAT8gfKDQk4hniNFKcdNYE6Xz2rxT0ffZmVCDDjcKGwm70I3Q
Yokw69tfrt3um8/De1wPcMVJcOUEVJUFX9QE8oBQckK3UsB18Dj3bCiTL5QyTI5/
AuxGIYs1DLRaSsG8yrFdhWQDeBqFz7vh+xTz1xlGPKO55/Wvp4RHl8nNtZFFbphu
jRId3yiuGY9B+dVv2OEFnSbAJ+5NUdtkYlCMZ0JGU9Py59qEjsCT/9kohIY5/SUx
smqUcV/hHRCnEZKE17lt0cdoQOxGiqzHhLqzkXK1NfrkqEdMTBtavK9uDz0OTTiu
87j8ieJmM3X3FiCXir399bduo3YuXkDQ
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:50:58 2025 by rpki-client